Skip to content

Instantly share code, notes, and snippets.

View NitroCao's full-sized avatar
😷
learning

NitroCao NitroCao

😷
learning
24 followers · 13 following
View GitHub Profile
@NitroCao
NitroCao / cannot_stat_bridge-nf-call-iptables
Created April 21, 2019 06:48
sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: No such file or directory
Load `br_netfilter` kernel module first.
@NitroCao
NitroCao / change-default-connection-URI-in-libvirt
Created April 21, 2019 06:47
change default connection URI in libvirt
export LIBVIRT_DEFAULT_URI="qemu:///system"
@NitroCao
NitroCao / gist:4c935ad3c30d1c7dfa28d2e235c8b348
Created March 30, 2018 16:15
Another thought about detecting port scanning
* 是不是可以通过对未监听端口的流量检测来实现端口扫描检测？也就是说，如果有人向未开放的端口发送数据包试图建立连接，是否就可以认为是端口扫描。
* 初期可以用 libpcap 来捕获流量。这适用于流量比较小的情况，如果流量比较大，那么用这种方式可能效率会很低。